[SERVER-50065] Add OCSP tests for Certificate Rotation Created: 31/Jul/20  Updated: 29/Oct/23  Resolved: 13/Aug/20

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: None
Fix Version/s: 4.7.0, 4.4.2

Type: Task Priority: Major - P3
Reporter: Shreyas Kalyan Assignee: Mark Benvenuto
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Backports
Depends
depends on SERVER-49133 Implement Rotate for Openssl Closed
Related
is related to SERVER-50345 Fix ref count cycle in SSLManager and... Closed
Backwards Compatibility: Fully Compatible
Backport Requested:
v4.4, v4.2, v4.0
Sprint: Security 2020-08-10, Security 2020-08-24
Participants:

 Description   

When we start the server, we fetch the OCSP response for stapling asynchronously. When we rotate, we fetch the response synchronously, cancelling rotation if the certificates have been revoked. We want to test this functionality for rotation to ensure that the rotation is cancelled.



 Comments   
Comment by Githook User [ 21/Sep/20 ]

Author:

{'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}

Message: SERVER-50065 Add OCSP tests for Certificate Rotation

(cherry picked from commit cb6ad17249e8ff4f00ffe5a8ddc25719a3811222)
Branch: v4.4
https://github.com/mongodb/mongo/commit/19c47c6a5382663d9120b9cd675722be2d654d2d

Comment by Githook User [ 21/Sep/20 ]

Author:

{'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}

Message: SERVER-50065 Add OCSP tests for Certificate Rotation

(cherry picked from commit f789d24cf6c57621ba7a40a257dbe9a09b06414e)
Branch: v4.4
https://github.com/10gen/mongo-enterprise-modules/commit/d2ebbb06bf48786c43359f8e2bde61018bc18419

Comment by Githook User [ 13/Aug/20 ]

Author:

{'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}

Message: SERVER-50065 Add OCSP tests for Certificate Rotation
Branch: master
https://github.com/mongodb/mongo/commit/cb6ad17249e8ff4f00ffe5a8ddc25719a3811222

Comment by Githook User [ 13/Aug/20 ]

Author:

{'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}

Message: SERVER-50065 Add OCSP tests for Certificate Rotation
Branch: master
https://github.com/10gen/mongo-enterprise-modules/commit/f789d24cf6c57621ba7a40a257dbe9a09b06414e

Generated at Thu Feb 08 05:21:37 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.